User user = userManager.findUser( source.getPrincipal() );
username = user.getUsername();
if ( user.isLocked() && !user.isPasswordChangeRequired() )
{
throw new AccountLockedException( "Account " + source.getPrincipal() + " is locked.", user );
}
PasswordEncoder encoder = securityPolicy.getPasswordEncoder();
getLogger().debug( "PasswordEncoder: " + encoder.getClass().getName() );